Protected by rate limiting and audit logging